General

  • Target

    lumma2cstealer.rar

  • Size

    9.5MB

  • MD5

    a28f8497d81e6c0eb4674eaf141b2be9

  • SHA1

    0a7306dac6073bfae7c2f85038a219d4d8af0966

  • SHA256

    4ffd0e9bb08709e9bac1ab64ce6b910ac7e695241bd27b44f4471bdc547975d7

  • SHA512

    7dc51e469ac5e1fc5af62aa81d32b59cd793859824a4fb330df147bea50f714e4dddadcc0eba56399b7959f9b9429a988d7fd5ef1456b72e5f6ee9bf70efe968

  • SSDEEP

    196608:xNHOwwImfEyhKWg33UZDgF9nJXgwg47I3fJG9T0eVUOjkyknHBrX:xNH7wpfEJdEZkTqL47RBvUO4yknhj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • lumma2cstealer.rar
    .rar

    Password: lummac2

  • Lumma2cBuilder.exe
    .exe windows:4 windows x86 arch:x86

    Password: lummac2

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • assets/GDH.dll
    .dll windows:6 windows x86 arch:x86

    Password: lummac2

    fa2e5d6697a377ded01d9b18caaac5d7


    Headers

    Imports

    Exports

    Sections

  • assets/betterinfo.dll
    .dll windows:6 windows x86 arch:x86

    Password: lummac2

    2c9d8577fb79801809e2a90aa3307d1f


    Headers

    Imports

    Sections

  • assets/data/core.json
  • assets/glew32.dll
    .dll windows:6 windows x64 arch:x64

    Password: lummac2

    828597a3d20489b3c53681d933c325ee


    Headers

    Imports

    Exports

    Sections

  • assets/legacy.dll
    .dll windows:6 windows x64 arch:x64

    Password: lummac2

    26b7c8e8e41aa0701073c98afa44cea1


    Headers

    Imports

    Exports

    Sections

  • assets/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    Password: lummac2

    27c45b3de2498d2adb3dd620312262d3


    Headers

    Imports

    Exports

    Sections

  • assets/liblzma.dll
    .dll windows:6 windows x64 arch:x64

    Password: lummac2

    813e2c3ce6f131809859991eb758203c


    Headers

    Imports

    Exports

    Sections

  • assets/minhook.x32.dll
    .dll windows:6 windows x86 arch:x86

    Password: lummac2

    da3eb29eb9c7d9bb0f58952aaa5a2a4c


    Headers

    Imports

    Exports

    Sections

  • assets/pthreadVC3.dll
    .dll windows:6 windows x64 arch:x64

    71a1d263f4889718393b863c3fce7fde


    Headers

    Imports

    Exports

    Sections

  • fmod.dll
    .dll windows:6 windows x86 arch:x86

    392a99ffa08105fe7dcbe1f3fb9add4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/activation.jar
    .jar
  • lib/asm-all.jar
    .jar
  • lib/commons-email.jar
    .jar
  • lib/dn-compiled-module.jar
    .jar
  • lib/dn-php-sdk.jar
    .jar
  • lib/gson.jar
    .jar
  • lib/jfoenix.jar
    .jar
  • lib/jkeymaster.jar
    .jar
  • lib/jna.jar
    .jar
  • lib/jphp-app-framework.jar
    .jar
  • lib/jphp-core.jar
    .jar
  • lib/jphp-desktop-ext.jar
    .jar
  • lib/jphp-desktop-hotkey-ext.jar
    .jar
  • lib/jphp-gui-ext.jar
    .jar
  • lib/jphp-gui-jfoenix-ext.jar
    .jar
  • lib/jphp-json-ext.jar
    .jar
  • lib/jphp-jsoup-ext.jar
    .jar
  • lib/jphp-mail-ext.jar
    .jar
  • lib/jphp-runtime.jar
    .jar
  • lib/jphp-systemtray-ext.jar
    .jar
  • lib/jphp-xml-ext.jar
    .jar
  • lib/jphp-zend-ext.jar
    .jar
  • lib/jphp-zip-ext.jar
    .jar
  • lib/jsoup.jar
    .jar
  • lib/mail.jar
    .jar
  • lib/slf4j-api.jar
    .jar
  • lib/slf4j-simple.jar
    .jar
  • lib/zt-zip.jar
    .jar
  • msvcp140.dll
  • xresource.dll
    .dll windows:5 windows x86 arch:x86

    de7f0fa8d8017f45a0eff391c4d13b01


    Code Sign

    Headers

    Imports

    Exports

    Sections